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DETAILED ACTION 
Claim Rejections - 35 USC § 103 

1 . The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claims 1-4 and 6-14, are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Rose et a!., US Patent number 5,708,709 in view of Horstmann, USPN 6,009,401. 

With regard to claim 1, 4, and 12, Rose discloses a content distribution system 
for performing content transaction management (column 1 lines 5-7), including a 
plurality of user devices among which the content transaction management allows a 
content to be secondarily distributed (column 2 lines 66-67), a secure container 
(transmission format version) containing the content encrypted by a content key 
(column 9 lines 46-48), and container information including conditions set for a 
transaction of the content (column 5 lines 31-43), a first section for distributing the 
content by transmitting said secure container (server 104), and a second section for 
performing person authentication (application builder 112), when said secure container 
is transmitted among the user devices (column 3 lines 11-18), based on an IDC (Client 
ID, column 10 lines 4-9) which includes a template serving as person identification data 
of a target user for the content transactions including personal identification information 
(particular user, column 11 lines 35-38), and which is identified in reference to an IDC 
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identifier list (licensee ID for particular user, column 5 lines 35-36), wherein the 
container information includes the IDC identifier list as a list of the IDCs (column 5 lines 
31-36), the IDC identifier list is generated by a person identification authority as a third 
party agent (trial license application program 134, column 3 lines 40-42), wherein a 
secure container distributing device among the user device is configured to compare 
sampling information input by a user with the template stored in the IDC identified in 
reference to the IDC identifier list (column 8 lines 11-31), to process person 
authentication of a user of a receiving device among the user devices (column 8 lines 
25-27), to which the secure containers to be distributed, and to perform a process of 
distribution of the content key for decrypting the content stored in the secure container, 
when the comparison result is affirmative (column 8 lines 25-31). Rose does not 
disclose encrypting and decrypting the client ID (in one of a plurality of manners). Rose 
does disclose that the client ID could be verified (column 10 lines 12-14). Horstmann 
discloses a well-known way to verify an ID is to decrypt and compare it (column 5 lines 
12-16). It would have been obvious for one of ordinary skill to use the decrypt and check 
method of Horstmann when applying the verifying ID embodiment of Rose since it is a 
very secure manner of ID verification. 

With regard to claim 2, Rose discloses storing the container to local memory 
(column 9 lines 54-56). 

With regard to claim 3, Rose discloses the control information includes conditions 
for processing secondary distribution (expiration date). 
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With regard to claim 6, Rose discloses after verification, the program may be 
loaded for execution in the client's computer (column 10 lines 21-29) 

With regard to claim 7, Rose discloses the key is available to the client (column 
10 lines 21-29). 

With regard to claim 8, Rose discloses the container is stored before verification 
(column 9 lines 54-56). 

With regard to claim 9, Rose discloses the user is being verified (column 10 lines 
25-29). 

With regard to claim 10, Rose discloses the container contains user permissions 
(column 10 lines 43-53). 

With regard to claim 14, Rose discloses the ID is created from the user's 
personal information (column 7 lines 9-26). 

With regard to claims 11 and 13, Rose in view of Horstmann discloses the 
content distribution system, as outlined above, but does not mention adding a digital 
signature to the container. The examiner takes official notice that adding a signature to 
distributed data is common to protect the receiver from harmful executables. It would 
have been obvious for one of ordinary skill in the art to sign the container disclosed by 
Rose to increase the receiver's security and trust. 

Response to Arguments 
3. Applicant's arguments filed 27 February 2007 have been fully considered but 
they are not persuasive. 
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Applicant argues that Rose does not disclose transmitting the container of claim 
1 including biometric or other personal identification information. While the examiner 
agrees that Rose does not seem to specifically disclose biometric data, Rose does 
discloses other personal identification information. For example, in column 11 lines 35- 
38 Rose discloses the client ID associated with the application builder can contain 
specific data for a particular user. Further, in column 5 lines 35-36 Rose discloses the 
license ID is for a particular user, thus contains personal identification information. 

Conclusion 

4. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jacob Lipman whose telephone number is 571-272- 
3837. The examiner can normally be reached on M-Fr. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on 571-272-381 1 . The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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